syzbot

 sign-in | mailing list | source | docs
🐞 Open [905]
🐞 Fixed [143]
🐞 Invalid [1078]
⬇ Missing Backports [73]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in dnotify_free_mark

Status: upstream: reported C repro on 2023/07/30 07:52
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+2f4aa3239150dd006e44@syzkaller.appspotmail.com
First crash: 1001d, last: 4d05h
Fix commit to backport (bisect log) :
tree: upstream
commit 4ad5c924df6cd6d85708fa23f9d9a2b78a2e428e
Author: Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
Date: Fri Sep 22 10:07:59 2023 +0000

  fs/ntfs3: Allow repeated call to ntfs3_put_sbi

  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2023/10/28 linux-6.1.y (ToT) 32c9cdbe383c C [report] kernel BUG in dnotify_free_mark
2023/07/30 upstream (ToT) d31e3792919e C [report] kernel BUG in dnotify_free_mark
2023/10/28 upstream (ToT) 2af9b20dbb39 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in dnotify_free_mark ntfs3 -1 C error done 22993 258d 1276d 29/29 fixed on 2025/11/17 09:14
linux-5.15 kernel BUG in dnotify_free_mark missing-backport origin:upstream -1 C done 608 57d 647d 0/3 upstream: reported C repro on 2024/07/18 09:21
linux-6.6 kernel BUG in dnotify_free_mark origin:lts-only -1 C inconclusive 137 83d 272d 0/2 upstream: reported C repro on 2025/07/29 04:21
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/11/23 13:40 3h54m fix candidate upstream OK (1) job log
2023/09/29 04:09 1h18m bisect fix linux-6.1.y OK (0) job log log
marked invalid by web-security-scanner@google.com

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: events_unbound fsnotify_mark_destroy_workfn
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 f4 b9 8e ff 48 8b 3d ad 55 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 dd b9 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc900000e7b68 EFLAGS: 00010293
RAX: ffffffff81f3bab3 RBX: ffff88807a224000 RCX: ffff88813fe78000
RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffff88807a224000
RBP: ffffc900000e7c30 R08: ffffffff90af72ff R09: 1ffffffff215ee5f
R10: dffffc0000000000 R11: fffffbfff215ee60 R12: 1ffff1100f444802
R13: dffffc0000000000 R14: ffff88807a224080 R15: ffffffff8a9a2ae8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f37963ee000 CR3: 0000000028e33000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline]
 fsnotify_mark_destroy_workfn+0x257/0x2f0 fs/notify/mark.c:928
 process_one_work+0x8a2/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1270 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 f4 b9 8e ff 48 8b 3d ad 55 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 dd b9 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc900000e7b68 EFLAGS: 00010293
RAX: ffffffff81f3bab3 RBX: ffff88807a224000 RCX: ffff88813fe78000
RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffff88807a224000
RBP: ffffc900000e7c30 R08: ffffffff90af72ff R09: 1ffffffff215ee5f
R10: dffffc0000000000 R11: fffffbfff215ee60 R12: 1ffff1100f444802
R13: dffffc0000000000 R14: ffff88807a224080 R15: ffffffff8a9a2ae8
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055db7aef21a8 CR3: 0000000030f57000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2688):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/09 19:30 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2025/02/19 13:20 linux-6.1.y 0cbb5f65e52f 9a14138f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/11/09 12:28 linux-6.1.y d7039b844a1c 6b856513 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/04/20 03:45 linux-6.1.y 6741e066ec76 af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2023/07/30 07:52 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 23:56 linux-6.1.y 8e8fc038cad5 24ecfc1e .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2025/12/28 13:03 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2025/12/23 05:45 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2026/04/23 00:55 linux-6.1.y 7c87defbd336 b10da5ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/22 11:47 linux-6.1.y 7c87defbd336 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/21 19:06 linux-6.1.y 7c87defbd336 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/21 06:46 linux-6.1.y 7c87defbd336 3f2e655b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/20 17:33 linux-6.1.y 7c87defbd336 e65da4ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 12:15 linux-6.1.y 7c87defbd336 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 09:39 linux-6.1.y 8e8fc038cad5 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 04:43 linux-6.1.y 8e8fc038cad5 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 04:39 linux-6.1.y 8e8fc038cad5 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 16:38 linux-6.1.y 8e8fc038cad5 24ecfc1e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 01:23 linux-6.1.y 8e8fc038cad5 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/16 14:23 linux-6.1.y 8e8fc038cad5 4743f87d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/16 01:11 linux-6.1.y 8e8fc038cad5 df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/15 14:33 linux-6.1.y 8e8fc038cad5 c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/15 01:11 linux-6.1.y 8e8fc038cad5 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/14 13:16 linux-6.1.y 8e8fc038cad5 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/14 01:52 linux-6.1.y 8e8fc038cad5 1a086e7c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/13 12:50 linux-6.1.y 8e8fc038cad5 9530ccf9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/11 16:47 linux-6.1.y 8e8fc038cad5 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/11 16:47 linux-6.1.y 8e8fc038cad5 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/09 03:59 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 16:08 linux-6.1.y 1989cd3d56e2 d9b7f621 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 00:59 linux-6.1.y 1989cd3d56e2 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 08:33 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/06 05:12 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/03 00:05 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/02 11:56 linux-6.1.y 1989cd3d56e2 91bc79b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 23:35 linux-6.1.y 1989cd3d56e2 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 11:59 linux-6.1.y 1989cd3d56e2 9a1f7828 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 23:13 linux-6.1.y 1989cd3d56e2 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 11:06 linux-6.1.y 1989cd3d56e2 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 22:44 linux-6.1.y 1989cd3d56e2 d0af506e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:39 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:37 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 15:30 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 03:20 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/27 14:40 linux-6.1.y 1989cd3d56e2 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:36 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:35 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 23:05 linux-6.1.y 1989cd3d56e2 c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 13:45 linux-6.1.y 1989cd3d56e2 8ee77f7d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
* Struck through repros no longer work on HEAD.